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FAMILIES OF SUPERSINGULAR CURVES IN 
CHARACTERISTIC 2 

JASPER SCHOLTEN AND HUI JUNE ZHU 


Abstract. This paper determines all normal form of hyperelliptic supersingu¬ 
lar curves of genus g over an algebraically closed field F of characteristic 2 for 
1 < 9 < 8. We also show that every hyperelliptic supersingular curve of genus 
9 over F has an equation y 2 — y = a; 19 + c a x 9 + c 3 x for some c S F 2 . Conse¬ 
quently, the paper determines the dimensions of the open locus of hyperelliptic 
supersingular curves of genus g < 9 over F 2 . 


1. Introduction 

In this paper, a curve is a projective, smooth and geometrically integral algebraic 
variety of dimension 1. A curve is supersingular if its Jacobian is a supersingular 
abelian variety, that is, its Newton polygon is a straight line segment of slope 
1/2. See Introduction and Appendix of Q for literatures on supersingular abelian 
varieties and related open questions on stratification in the moduli space of abelian 
varieties. It has been proved that there are supersingular curves of every genus 
over F 2 (see but it is not settled if there are hyperelliptic supersingular curves 
over F 2 of every genus, which was an initial goal of our study (see (jj). Several 
isolated discoveries of supersingular curves have yielded unprecedented applications 
in sphere packing || and |j|. There are also rich literatures in coding theorem upon 
applications of supersingular curves (see (jll)). See the introduction in []7j for more 
recent progress regarding the hyperelliptic supersingular curves in characteristic 2. 
In [Q a question is raised that for which p and g there are positive dimensional 
families of hyperelliptic supersingular curves over F p of genus g. We give an answer 
to this question for p = 2 and g < 9 in Theorem [l| 

Every genus-g hyperelliptic curve X over F of 2-rank zero has an affine equation 

(1) X: y 2 -y = c 2g+ ix 2g+1 + c 2g -ix 2g ~ 1 + ... + ax, 

where a, ■ ■ ■ , c 2g ~ 1 £ F and c 2g+ \ = 1. (See Proposition pT)|) . 

For any g, an equation ®) with some vanishing conditions among q’s is called 
a normal form of hyperelliptic supersingular curve of genus g if every such equa¬ 
tion defines a hyperelliptic supersingular curve and conversely every hyperelliptic 
supersingular curve of genus g has such an equation for some c/s in F, and there 
are only finitely many such equations for each curve. 

Let USg/F denote the open locus of hyperelliptic supersingular curves of genus 
g over F. 
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Theorem 1. Let F be an algebraically closed field of characteristic 2. The normal 
forms of hyperelliptic supersingular curves over F of genus g < 8 are in the table 
below with all ce £ F. The dimensions ofTtS g /F are in the right columns. 


genus g 

normal form X g 

dim(H5 ff /F) 

1 

k: 

1 

II 

w 

0 

2 

y 2 - y = x b + C 3 X 3 

1 

3 

none 

— OO 

4 

y 2 — y = x^ + c 5 x b + C 3 X d 

2 

5 

y 2 — y = ad 1 + c^x 6 + c\x 

2 

6 

y 2 — y = x 13 + C 32: 3 + cix 

2 

7 

none 

— OO 

8 

y 2 — y = x Lt + cgx y + C 5 X b + c^x 6 

3 


Table 1. normal forms for g < 8 


Moreover, every supersingular curve over F of genus 9 has an equation 

y 2 — y = x 19 + cV + c 3 x 


for some c £ F 2 . We have dim(TtSg/F) = 0. 


Remark 2. From Theorem |l] one can easily derive the following: If g = 1 or 2, then 
all 2-rank zero curves are supersingular. If g = 3 or 7, then none of these curves 
is supersingular. If g = 4 then A is supersingular if and only if C 7 = 0. If g = 5 
then A' is supersingular if and only if C 7 = 0 and cgcn = cf. If g = 6 then A' is 
supersingular if and only if C 7 = 0, cn = 0, and C 5 C 13 = Cg. If g = 8 then X is 
supersingular if and only if C 15 = C 13 = cn = C 7 = 0. 


Remark 3. It is clear from Theorem |j] that HS g /F for 1 < g < 8 are irreducible 
and unirational. One wonders if it is so for all g. 

The proof of Theorem [I] splits into two parts: In section [| we show that all 
curves in Table 1 are supersingular. In section ^ we show that every supersingular 
curve of genus < 9 has an equation in Table 1. 

One main idea in the proof of Theorem [I] is to use a lemma of || to reduce 
the initial problem to a combinatorial puzzle. Then we formulate an algorithm, 
utilizing Proposition [h] and Theorem ^ from ||], to prove our assertion. 

We anticipate some results of similar sort for Artin-Schreier curves in charac¬ 
teristic p if p is small compared to the genus. For some results for p large, see 

0 - 
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2. 2-adic box and a tiling puzzle 

Let s(-) denote the number of l’s in the binary expansion of a positive integer. 
This section digresses to some new combinatorial notion. Let S be a finite set of 
positive integers. Let r be a positive integer. For a finite sequence of integer pairs 
{[bi,l i ]} } ' =1 such that 
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1 . ti £ S, 0 < b z < b i+ 1 ; 

2. £i -\-1 if bj, — b[-\- 1, 

3. Er=i^=r 

we call it a tiling sequence of r or an r-tiling sequence. If no such sequence exists we 
set s(r, S ) := oo; otherwise, we denote by s(r, S) the minimal length among all tiling 
sequences of r. Let I\ (r, S) denote the set of all such minimal length tiling sequences 
of r. For any r-tiling sequence M = {[6j, £j]}} =1 , let S(M) := {£\,... ,£ v }. 

Example 4. Put r = 2 17 — 2 2 and S = {1,3,9,11}. Observe that the binary expan¬ 
sion of r has 15 consecutive l’s followed by two 0’s. To make the shortest r-tiling 
sequence ideally one has to choose i G S with highest s(£) possible and with every 
l’s contributes to r when added up with each other. In this example, (9)2 = 1001 
and (11)2 = 1011 make 5 consecutive l’s if added as 

10 0 1 
+) 1 0 1 1 
11111 

Thus to make 15 consecutive l’s we just have to combine 3 such blocks. The 
minimal length r-tiling sequence is demonstrated below. The only way to make 












1 

0 

0 

1 

0 

0 

[2,9] 










1 

0 

1 

1 

0 

0 

0 

[3,11]] 






1 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

[7,9] 





1 

0 

1 

1 

0 

0 

0 

0 

0 

0 

0 

0 

[8,11] 

1 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

[12,9] 

+) 1 0 

1 

1 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

[13,11] 

1 1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

0 

0 



Table 2. The minimal length (2 17 — 2 2 )— tiling 


a shorter r-tiling sequence is to use more of the form [*,ll]’s in the sequence, 
which is impossible since more 11 will not make consecutive l’s in its sum un¬ 
less some l’s does not contribute to the sum. So s(r,S) = 6 and K(r,S) = 
{{[2,9], [3,11], [7,9], [8,11], [12,9], [13,11]}}. It is computationally effective to rep¬ 
resent the set K(r,S) binarily as in the above table. But since it takes too much 
space, in this paper we shall adopt the following way of representation 

2 17 — 2 2 = 11 • 2 13 + 9 • 2 12 + 11 • 2 8 + 9 • 2 7 + 11 • 2 3 + 9 • 2 2 . 

Denote this minimal length r-tiling sequence by M then S(M) = {9,11}. 

Set d := 2g + 1 for the rest of the paper. Recall the 2-adic box [k] and notations 
defined in j?j, Section 2], 

d 

K r := {k = *(fci, fc 2 , ■ ■ ■ , k d ) € | fci > fc 2 > • • • > k d > 0,^ h = r} 

l =1 

s(k) = s{k\ — k 2 ) + s{k 2 — k^) + ... + s{kd-i — kd) + s{kd)■ 

Lemma 5. There is a bisection between the sets K(r,S) and 

{k £ K r | s(k) = s(r, S) and kn = ke +1 for all £ ^ S}. 
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Proof. We shall define the map first. An r-tiling sequence {[&i, KilE £ K(r, S ) is 
sent to the element k € K r whose 2-adic &oa;[k] has k^ v = #{i \ v = bi and i < 

Conversely, given k £ K r with he = kg + \ for £ £ suppX, one defines {[6*, 
as follows: For v such that ki, v ^ 0 and for i such that Ej=o < * < Ej=o ki,j 
let bi := v. Let m i > ... > „ > 0 be the sequence of positive integers such that 

k mi ,v > k m2tv ... > k mki tV and such that k mj > k mj+ Note that rrij £ S. Define 
£i := k . The detailed verification of the bijectivity of the map is tedious 

and we omit this. Instead we shall visualize the bisection below for Example [|. □ 

In the Table 3 below, the last line is the binary expansion of r = 2 17 — 2 2 . 
The block above the double horizontal lines is the 2-adic box [k] . The 6 lines 
immediately beneath the double horizontal lines are the column sums of | k | added 
up in the order from right to left. They represent the minimal length r-tiling 
sequence of I\(r,S ) as seen in Table 2. Their sums are of course equal to r as 
shown below the single line. 



0 

0 

0 

1 

1 

0 

0 

0 

1 

1 

0 

0 

0 

1 

1 

0 

0 


0 

0 

0 

1 

1 

0 

0 

0 

1 

1 

0 

0 

0 

1 

1 

0 

0 


0 

0 

0 

1 

1 

0 

0 

0 

1 

1 

0 

0 

0 

1 

1 

0 

0 


0 

0 

0 

1 

1 

0 

0 

0 

1 

1 

0 

0 

0 

1 

1 

0 

0 


0 

0 

0 

1 

1 

0 

0 

0 

1 

1 

0 

0 

0 

1 

1 

0 

0 


0 

0 

0 

1 

1 

0 

0 

0 

1 

1 

0 

0 

0 

1 

1 

0 

0 


0 

0 

0 

1 

1 

0 

0 

0 

1 

1 

0 

0 

0 

1 

1 

0 

0 


0 

0 

0 

1 

1 

0 

0 

0 

1 

1 

0 

0 

0 

1 

1 

0 

0 


0 

0 

0 

1 

1 

0 

0 

0 

1 

1 

0 

0 

0 

1 

1 

0 

0 


0 

0 

0 

1 

0 

0 

0 

0 

1 

0 

0 

0 

0 

1 

0 

0 

0 

+) 

0 

0 

0 

1 

0 

0 

0 

0 

1 

0 

0 

0 

0 

1 

0 

0 

0 
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0 

0 

1 

0 

0 
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0 

1 

1 

0 

0 

0 








1 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 
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0 

1 

1 

0 

0 

0 

0 

0 

0 

0 

0 



1 

0 

0 

1 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

+) 

1 

0 

1 

1 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 

0 


1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

1 

0 

0 


Table 3. The 2-adic box and the minimal length r-tiling sequence 


3. Supersingularity criterion 

Let X be as defined with affine equation in ([!]). Let NPi(X) be the first slope 
of the Newton polygon of X (see 0). Recall that d := 2g + 1. 

Define the set of supports of X by suppX := {£ £ Z | a ^ 0}. For r > 1 let 

C(r, suppX) := e n ^ 

MeK(r,suppX) [b,£]£M 

Lemma 6 . Let notations be as above. Let X be a rational number with 0 < A < 1/2. 
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a) Suppose that for all m > 1, n > 1, and 1 < j < g one has 

s(m2 n+9 ~ 1 — j,suppA) > [nA]. 

Then 

NPi(X) > A. 

b) Suppose NPi(X) > A. Suppose there are positive integers 1 < j < g, no > 1 
and 1 < mo < g/2 such that 

1) for all m > 1,1 < n < no and for all m > g/ 2, n = no we have 

s(m2 n+g ~ 1 — j, suppX) > [nA] ; 

2) s(m 0 2 no+9 ~ 1 — j, suppX) = [noA] — 1. 

Then 

C{mo2 no+9 ~ 1 - j, suppX) = 0. 

Proof. Let W(F) be the ring of Witt vectors of F. Let ae £ W (F) be a lift of 
ct £ F. Let B := min{s(k) | k £ K r , and kg = ke +1 for all £ qL suppX}. Set 
0° := 1. We recall C r (N) from I ; we know from there that 

d -1 

C r (N) = Y 2S(k) n °^ _/Cf+1 mod2 s+1 . 

keK r e=i 

Since ord2(C' r (lV)) > B , we may write 

CrW = £ r^- B 'l{cY ke+1 mod 2. 

k£K r 1= 1 

By the bijection discussed in section [| we get 

(2) ( ytlll) mod 2 ) = ^ r ’ SU PP^)' 

By (2[), we note that a) and b) follow from the Key Lemma of ||. (see also [7| 
Key-Lemma 2.1 ,i)]). □ 

Below we have two corollaries. 

Corollary 7. Let X be as in (f\). Let a := max< esupp .Ys(f). Then we have 
NPi(X) > 1/a > 1/d. 

Proof. For r = m2" +9 ~ 1 — j consider any r-tiling sequence given by m2 n+9 ~ 1 — j = 
i £i^ bi ■ Clearly we have 

l> V 

va > s {£i) = J]] s(£i2 bl ) > s(m2 n+9 ~ 1 — j) > n, 

i= 1 i—l 

so v > [£]. In particular 

s(m2" +s_1 — j, suppX) > [—]. 

a 

By Lemma |(i] a) we have A > 1/a. But c £ z = 1^0so(7<c? and we have 
NPi(X) > 1/a > 1/d. □ 

Remark 8. Any curve X given by an equation of the form y 2 — y = Xa=o Cix2 +1 
over F is supersingular. Indeed, apply the above corollary to this curve we get 
a = 2 and so NPi(X) > 1/2. (This result was proved in @ in the case F C F2.) 
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Corollary 9. Suppose X given by equation is supersingular. Let mo, no and 
j be positive integers satisfying hypothesis of Lemma ^ b) for A = Suppose the 
set K(mo‘2 no+9 ~ 1 — j, suppX) consists of one element M. Then we have S(M) ^ 
{2 g + 1} and if S(M) = {£, 2 g + 1} with 1 < £ < 2 g, then ct = 0. 

Proof. Suppose S(M) = {2 g + 1}, then by Lemma || b) we have C(mo2 n ° +9 ~ 1 — 
j, suppX) = 0. But it is easily seen that 

C'(m 0 2" o+s_1 — j, suppX) = cf g+1 = 1 

[b,2g+l]eM 

because C2 g +i = 1. Contradiction. This proves the first assertion. 

Now suppose S(M) = {£, 2 g + 1}. By Lemma || again, we have 

C(mo2 n ° +9 ~ 1 — j, suppX) = n II c C+i 

[6,I]6M [b',2 g +l]eM 

= n c f= c f ib ^ M 2 b = o. 

[6,<]eM 

Thus q = 0. □ 


4. Supersingularity 


We shall show that all curves in Table 1 are supersingular. 

The supersingularity of Ag follows from Remark |[ The supersingularity of the 
curve C : y 2 — y = x 33 + C3X 9 + C\X 3 over F also follows from Remark ||. By 
observing that C covers X 5 , the supersingularity of X 5 follows. 

Now we claim that X 6 is supersingular by a method suggested to us by Noam 
Elkies. We present it below: Let E be the elliptic curve defined by y 2 —y = x 3 +t 13 + 
c^t 3 + C\t over F(t), which can be viewed as a quadratic twist of E 0 : y 2 — y = x 3 
over the function field F(Xq) of Xq. The curve Xq is supersingular if and only 
if the rank of Hom^(Jac(A'e), Eo), or equivalently the rank of E(F(t)) is 24, the 
maximal possible (see [[)]]). In the same vein as in [|| pages 3-4], one can show that 
the canonical height of a nonzero point in E(F(t)) is > 8. We shall show in the 
next paragraph that there are 196560 nonzero points with the minimal canonical 
height 8. Since there are no lattices of rank < 23 with that many vectors of minimal 
length page 23], this implies that E{F{t)) has rank 24 and the supersingularity 
of Xq follows. 

If P = ( x,y ) is a point in E(F(t)) with ^-coordinate of the form 

x = a~ 16 t 6 + a -28 f 4 + a~ i0 t 2 + a 32 t + xq + a~ 64 (t — to) -2 , 


for a £ F* and xo,to & F, then P has canonical height 8 (see |2| Proposition 2]). 
Following closely the computations presented in || page 6-7], one finds that P lies 
in E(F(t)) if a,x 0 and to satisfy the following equations: 

(3) a 4096 + c 3 V 024 + c} 6 a 256 + c 46 a 64 + C 4 a 16 + c 2 a 4 + a = 0; 

(4) a 36 t 6 0 + a 24 t 4 + a 12 t 2 + a 84 t 0 + a 1092 + c 8 a 324 + 

a 312 + a !56 + c 4 a !32 + c 2 a !20 + a H7 + ^84 + x = Q . 

(5) a 576 + a 264 + c 3 4 a 192 + (xq + £o)a 160 + a 108 + t 8 = 0. 


(One may also check alternatively that the solutions to these 3 equations indeed 
yield x-coordinates of points in E(F(t)).) One can show that these 3 equations are 
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separable in a, to and Xq respectively by observing that their derivatives are nonzero 
constant. The number of nonzero solutions a of ([|) is 4095. For each such a there 
are 6 solutions of to satisfying (I- For each pair of {a, to) there are 4 solutions of 
Xq satisfying (§• So there are totally 4095 -6-4 possible cc-coordinates, each of 
which yields two points. This results in 2 ■ 4 • 6 ■ 4095 = 196560 points in E(F(t)). 

5. Necessary 

Lemma b) shall find its extensive application here. A few remarks are in 
order. If there are indeed positive integers j,no,mo satisfying the hypothesis of 
Lemma b) for some A, then it is a finite problem to find them and verify. To 
see this, define T(v, j,suppX) as the set of all sequences satisfying b) 

and that ^ bi = —j mod 2f v . Clearly, T{v, j, suppA) is a finite set, and if 

v = s(mo2 n ° +9_1 — j, suppA) for some mo and no, then T(v, j, suppA) contains 
K(m2 n ° +9 ~ 1 - j, suppA) for every m with 

s(m2 no+g - 1 - j, suppA) < s(m 0 2 no+9 ~ 1 - j, suppA). 

So one can verify if b) is satisfied by computing T(v, j, suppA) for 1 < j < g and 
for v > 1, and check for each such v and j whether there exist mo and no with the 
required property. 

We shall verify the hypotheses of b) by the aforementioned algorithm, together 
with a few isolated tricks to accelerate the program. For instance, we use an 
observation that if two sequences {[&i,£,]}£=! and satisfy X^=i ^2 bi = 

^2 bi and v' < v, then one can ignore all sequences including {[6*,^i]}^ =1 as a 
subsequence. 

For convenience of the reader we first quote Proposition 4.1 and Theorem 1.1 of 
(?) below. 

Proposition 10. Let X be a hyperelliptic curve over F of genus g and 2-rank zero. 
Let m < 2 g be an odd integer, such that the binomial coefficient (2®t!) is odd f or 
some k > 0. Then there exists an equation for X of the form 

(6) y 2 = c 2i+i^ 2l+1 

i=0 

with C 2 g +i = 1 and c m = 0. Moreover, there are only finitely many equations for 
X of this form. 

Theorem 11. Let g > 3. Write h = [log 2 (3 + 1) + lj. Let X be a hyperelliptic 
curve over F given by an equation y 2 — y = 1 c i xl where C2 ff +i = 1. Then 

(I) NPipQ > l 

(II) Ifg < 2 h - 2 and c 2 h_ 1 ± 0 then NPi(X) = \ . 

(Ill) If g = 2 h — 2 and c 2 )>_i ^ 0 or C3. 2 h-i_i ^ 0 then NPi(X) = i. 

Now we will proceed with the proof of Theorem [l] for genus g > 5. For the 
rest of the proof we shall suppress the suppA from the notations C(r, suppX) and 
I\{r, supp X). For every genus we start with a curve with an equation in a box. 
Then we use supersingularity criterion to derive vanishness of coefficients of this 
initial equation, which accumulate to our desired equation declared in Table 1. 
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5.1. 3 = 5. Suppose X is a hyperelliptic supersingular curve over F of genus 5. By 
Theorem 0 H) and Proposition |lo] it has an equation 

y 2 — y = x 11 + cga ; 9 + C 3 X 3 + Cix 

for some ci, 03 , eg € F. 

Let suppX = {1,3,9,11}. Let 3 = 5. We checked that for n 0 = 13, m 0 = 1 and 
j = 4 the conditions of Lemma |] b) are satisfied, and K(nio2 n ° +9 ~ 1 — j ) consists 
of a unique element M as follows 

2 17 - 4 = 11 • 2 13 + 9 • 2 12 + 11 ■ 2 8 + 9 • 2 7 + 11 • 2 3 + 9 • 2 2 . 

Note that S(M) = {9,11}. (See Example [|.) Then Corollary || implies that 

eg = 0 I. 


5.2. 3 = 6 . Suppose X is a hyperelliptic supersingular curve over F of genus 6 . By 
Theorem 0111) and Proposition [To] it has an equation 

y 2 — y = x 13 + CgX 9 + C 3 X 3 + c±x 


for some C\ , C3, Cg G F. 

Let suppX = {1,3,9,13}. Let 3 = 6 . We checked that for no = 17, mo = 1, 
j = 4 the conditions of Lemma |] b) are satisfied, and K(mo2 n ° +9 ~ 1 — 4) consists 
of a unique element M as follows 


2 22 - 4 = 9 • 2 18 
Note that S(M) = 


+ 13 • 2 17 + 9 • 2 13 + 13 • 2 12 + 9 • 2 8 + 13 • 2 7 + 9 • 2 3 + 13 • 2 2 . 


{9,13}. By Corollary || we have 



5.3. 3 = 8 . Suppose X is a hyperelliptic supersingular curve over F of genus 8 . By 
Theorem 011) and Proposition [To] it has an equation 

y 2 — y = x 17 + C13X 13 + CnX 11 + cgx 9 + C7X 7 + C5X 5 + C3X 3 


for some cn £ F. 

Let suppX = {3,5,7,9,11,13,17}. We found for k = 0,1, 2,3,4 and 5 that 
K(2 21 ~ 3k — 8 ) consists of sequences {[ 6 *,^]}®“^ with either [be-k,^6-k] = [18— 3k, 7] 
or [fo 6 _fc,£ 6 _fc] = [17 — 3k, 13] and [ 65 -*,, = [15 — 3k, 11]. Hence we get 


C{2 21 - 8 ) 
C( 2 18 - 8) 
C( 2 15 - 8 ) 
C(2 12 - 8 ) 
C{ 2 9 - 8 ) 
C(2 6 - 8) 


c 2 l 8 C( 2 18 

- 8 ) + (cn4 ) 2 

15 C( 2 15 

- 8 ) 

c 2 l 5 C( 2 15 

- 8 ) + ( Cll 4 ) 2 

15 C( 2 12 

- 8 ) 

cf 2 C( 2 12 

- 8 ) + ( Cll 4 ) 2 

15 ~ . 0 

C( 2 9 

- 8 ) 

cfd{ 2 9 - 

8 ) + (cii 4) 215 

C( 2 6 - 

8 ) 

cfC( 2 6 - 

8 ) + (cii4 ) 216 

C( 2 3 - 

8 ) 

cf C( 2 3 - 

8 ). 




We checked that the conditions of Lemma |(i| b) are satisfied for A = no = 11, 
mo = 1 and j = 8. Hence C(2 18 — 8) = 0. We also checked that they are satisfied 
for A = |, no = 14, mo = 1 and j = 8. Hence C(2 21 — 8) = 0. All these equations 


imply C 7 = 0 and C 11 C 13 = 0 . 
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Suppose cn = 0. Let suppX = {3,5,9,13,17}. We checked that for A = 
j = 4, no = 19 and mo = 1 the conditions of Lemma [h] b) are satisfied, and 
K (mo2 n ° +9_1 — 4) consists of a unique element M as follows 

2 26 — 4 = 13 ■ 2 22 + 17 • 2 19 + 13 ■ 2 18 + 13 ■ 2 14 + 17 • 2 11 + 13 • 2 10 

+13 • 2 6 + 17 • 2 3 + 13 • 2 2 . 

Note that S(M) = {13,17}. By Corollary ^ we have 

Suppose ci3 = 0. Let suppX = {3,5,9,11,17}. We checked that for A = 
j = 4, no = 19 and mo = 1 the conditions of Lemma |g| b) are satisfied, and 
K (mo2 n ° +9_1 — 4) consists of a unique element M as follows 

2 26 _ 4 = n . 2 22 + 17 • 2 20 + 11 • 2 18 + 11 ■ 2 14 + 17 • 2 12 + 11 • 2 10 + 

11 • 2 6 + 17 • 2 4 + 11 ■ 2 2 . 


Cl3 = 0 


Note that S(M) = {11,17}. By Corollary || we have cn = 0 


5.4. 3 = 9. Suppose X is a hyperelliptic supersingular curve over F of genus 9. By 
Theorem |ll] II and Proposition |lo] it has an equation 


y 2 — y = x 19 + C13S 13 + c\\x 11 + cgx 9 + c 7 x 7 + C52; 5 + 03a; 3 + c\x 


for some ct £ F. 

Let suppX = {1,3,5,7,9,11,13,19}. We found for k = 0 , ... ,7 that A'(2 27_3fe — 

8) consists of all sequences {[&,, 4]}?=i possessing the following property: 

{ [6 8 _fc,4_fc] = [24 — 3/s, 7] or 

[h-k, 4-fc] = [23 - 3k, 13] and [6 7 _fc,4-fc] = [21 - 3k, 11] or 

[b 8 -k,h-k\ = [23 - 3k, 11] and [6 7 _ fe ,4-fc] = [21 - 3k, 19] or 

[bs-kJi-k] = [23 - 3k, 13] and [b 7 . k ,i 7 _ k ] = [20 - 3k, 19] and [6 6 _ fc ,4-fc] = [18 - 3k, 19]. 


C ( 2 21-3fc _ g) 


Hence 

C(2 27 ~ 3k — 8) = c 2 7 24 - 3fc C'(2 24 - 3fe -8) + (c 11 c{ 3 + c{ 1 ) 22 

+c 2 3 3 _3fc C'(2 18 - 3fe -8). 

We checked that the conditions of Lemma ^ b) are satisfied for A = j = 8 and 
(no, mo) equal to (17,4), (15, 2) and (13,1). Using the same kind of reasoning as for 
genus 8, one concludes that c 7 = 0 , C13 = 0 and cncf 3 + cf 1 = 0, which clearly 


implies cn = 0 


So we continue with X = {1, 3, 5,9,19}. We checked that for no = 19, mo = 1, 
j = 8 the conditions of Lemma |] b) are satisfied, and K(m 0 2 n ° +9 ~ 1 — 8) consists 
of a unique element M as follows 

24 1 m o21 1 in ol 9 j c . 0I6 i i n . ol 3 i in oil i c . 08 j i n . j 1 o . 


2 27 — 8 = 5 


2 + 19 • 2 Z1 + 19 • 2 + 5 • 2 iD + 19 • 2 1J + 19 • 2 11 + 5 • 2 s +19 • 2° + 19 • 2 
Note that S(M ) = {5,19}. By Corollary 0 we have 


c 5 = 0 


Now set suppX = {1,3,9,19}. We checked that for n 0 = 25, mo = 3, j = 8 the 
conditions of Lemma || b) are satisfied, and I\(mo2 n ° +9 ~ 1 — 8) consists of a unique 
element M as follows 


3 • 2 33 — 


= 19 ■ 2 30 + 19 ■ 2 28 + 3 • 2 25 + 19 • 2 23 + 3 • 2 20 + 19 • 2 18 + 3 ■ 
+19 ■ 2 13 + 3 • 2 10 + 19 ■ 2 8 + 3 • 2 5 + 19 ■ 2 3 . 

Note that S(M) = {3, 19}. By Corollary 0 we have 


,15 


c 3 = 0 
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Finally, set supp.Y = {1,9,19}. We found that for ?i 0 = 35, too = 3 , j = 8 
and A = | the conditions of Lemma 0 b) are satisfied, and that A'(3 • 2 43 — 8) 
consists of sequences {[bi,£i[}jl x with [617,£17] = [40,19], \b\Q,£\o\ = [38,19] and 
for k = 1 ,... ,5 we either have [b 3k ,£ 3k ] = [7k - 4 ,19], [b 3k+ i,£ 3 k+i] = [7 k - 2,19], 
\b 3k +2,£ 3 k+2\ = [7k + 1,1] or [b 3k ,£ 3k ] = [7k — 4,19], [63/5+1 >^3fc+i] = [7 k — 2,9], 
\b 3k +2, £^+2] = [7k — 1, 9]. So from Lemma |] it follows that 

0 = < 5(3 • 2 43 - 8 - 8 ) = (cf + c 12)2 3 +2 1 “+2 1 W2 24 +2 31 _ 


Thus 


„3 _ 8 

Cg — c x 


and we conclude that every hyperelliptic supersingular curve of 


genus 9 over F has to have an equation of the form y 2 — y = ar 9 + c 8 ar + c 6 x for 
some c € F. 

A straightforward computation shows that the curve X with equation y 2 — y = 
x 19 + c 8 ai 9 + c 3 x over F2 is supersingular for c G F2 but is not supersingular for 
c G F 2 2 - F 2 . Therefore, this curve is supersingular for only finitely many c G F2. 
In other words, the open locus of hyperelliptic supersingular curves of genus 9 over 
F2 is of dimension 0. 

Let c G F — F 2 . Supose X : y 2 — y = x 19 + c 8 x 9 + c 3 x is supersingular. Then 
its specialization yields infinitely many supersingular curves over Fg because the 
Grothendieck Specialization theorem says that the Newton polygon goes up under 
specialization maps (see || ). This would contradicts the conclusion in the previous 
paragraph. Therefore, X has to be defined over F2. 


Question 12. What are normal forms of these hyperelliptic supersingular curve of 
genus 9 over F 2 ? Are y 2 — y = x 19 and y 2 — y = .t 19 + x 9 + x the only ones? 


Computations by our algorithm reveal some pattern of the dimension of the open 
locus HS g /¥ 2 of hyperelliptic supersingular curves of genus g > 10 over F2. Vaguely 
speaking dim(W<S g /F2) is related to s( 2 g + 1) in the sense that dim(7f<S g /F2) goes 
smaller as the ratio of l’s in the binary expansion of 2g + 1 goes bigger. This is 
already evident in our previous paper [Q which shows that for 2 g + 1 = 2 h — 1 for 
some h > 2 then TtS g /¥2 is empty. This paper further explores this relationship. 

Question 13. It is desirable to formulate the pattern of dim(7AS g /F2) more pre¬ 
cisely by more numerical data. 
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